15958 matches found
jenkins: Observable timing discrepancy allows determining username validity
In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkins user database security realm...
CVE-2022-48149
Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
Sql injection
Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
Online Student Admission System SQL注入漏洞
Online Student Admission System is an online student admission system. It is used to computerize all pre- and post-admission activities of an institution. A security vulnerability exists in Online Student Admission System version 1.0, which was discovered to contain an SQL injection vulnerability...
CVE-2022-48149: Improper Neutralization of Special Elements used in an SQL Command
Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...
PT-2023-15591 · Unknown · Online Student Admission System
Name of the Vulnerable Software and Affected Versions: Online Student Admission System in PHP Free Source Code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter. Recommendations: For Online Student...
K15155: OpenSSH vulnerability CVE-2007-3102
Security Advisory Description Unspecified vulnerability in the linuxauditrecordevent function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. CVE-2007-3102 Impact None. F5 products...
K58935003: F5 Container Connector vulnerability CVE-2018-5543
Security Advisory Description The F5 BIG-IP Controller for Kubernetes k8s-bigip-crtl passes BIG-IP username and password as command line parameters, which may lead to disclosure of the credentials used by the container. CVE-2018-5543 Impact F5 BIG-IP Controller for Kubernetes This vulnerability...
K6923: LDAP and RADIUS authentication failures can reveal a valid FirePass username
Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of F5...
K31902105: OpenSSH vulnerability CVE-2016-20012
Security Advisory Description DISPUTED OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination...
Upload_Bypass_Carnage - File Upload Restrictions Bypass, By Using Different Bug Bounty Techniques!
File Upload Restrictions Bypass, By Using Different Bug Bounty Techniques! POC video: File upload restrictions bypass by using different bug bounty techniques! Tool must be running with all its assets! Installation: pip3 install -r requirements.txt Usage: uploadbypass.py options Options: -h, --he...
CVE-2022-37935
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password...
CVE-2022-37935
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password...
CVE-2022-37935: Undefined Security Weakness
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password...
CVE-2021-33948
SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...
CVE-2021-33948
SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...
CVE-2022-40032
SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information...
PT-2023-2205 · Hewlett Packard · Hpe Oneview For Vmware Vcenter
Name of the Vulnerable Software and Affected Versions: HPE OneView for VMware vCenter affected versions not specified Description: The issue is related to insufficient protection of registration data, which may lead to the disclosure of the HPE OneView username and password. This could allow an...
PT-2023-13741
Name of the Vulnerable Software and Affected Versions Simple Task Managing System version 1.0 Description The issue allows attackers to execute arbitrary code and gain sensitive information through a SQL Injection vulnerability in the login.php file, specifically in the username and password...
